GNU logs - #30143, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#30143: UX: print warning if substitute server is not authorized
Resent-From: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 17 Jan 2018 12:18:01 +0000
Resent-Message-ID: <handler.30143.B.151619147422441 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 30143 <at> debbugs.gnu.org
User-agent: mu4e 0.9.18; emacs 25.3.1
From: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
Date: Wed, 17 Jan 2018 13:17:19 +0100
Message-ID: <idjpo681xyo.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Suppose I add example.com as a substitute server by passing
=E2=80=9C--substitute-urls=3Dhttps://example.com=E2=80=9D to the daemon o=
r the Guix
command line.  I haven=E2=80=99t authorized the signing key, so Guix won=E2=
=80=99t
accept any of the substitutes from example.com.

Currently, Guix does not make it obvious to the user that a requested
substitute server is ignored because its key is not authorized.  We
should print a clear warning in this case.

(guix scripts authenticate) already includes =E2=80=9Cvalidate-signature=E2=
=80=9D, which
aborts with an error if the key is not authorized, but we don=E2=80=99t s=
eem to
use it.

--
Ricardo

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
Subject: bug#30143: Acknowledgement (UX: print warning if substitute
 server is not authorized)
Message-ID: <handler.30143.B.151619147422441.ack <at> debbugs.gnu.org>
References: <idjpo681xyo.fsf@HIDDEN>
X-Gnu-PR-Message: ack 30143
X-Gnu-PR-Package: guix
Reply-To: 30143 <at> debbugs.gnu.org
Date: Wed, 17 Jan 2018 12:18:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 30143 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
30143: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D30143
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#30143: UX: print warning if substitute server is not authorized
Resent-From: Chris Marusich <cmmarusich@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 22 Jan 2018 07:09:02 +0000
Resent-Message-ID: <handler.30143.B30143.151660493131924 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
Cc: 30143 <at> debbugs.gnu.org
From: Chris Marusich <cmmarusich@HIDDEN>
References: <idjpo681xyo.fsf@HIDDEN>
Date: Sun, 21 Jan 2018 23:08:39 -0800
In-Reply-To: <idjpo681xyo.fsf@HIDDEN> (Ricardo Wurmus's
 message of "Wed, 17 Jan 2018 13:17:19 +0100")
Message-ID: <87a7x6xte0.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Ricardo Wurmus <ricardo.wurmus@HIDDEN> writes:

> Suppose I add example.com as a substitute server by passing
> =E2=80=9C--substitute-urls=3Dhttps://example.com=E2=80=9D to the daemon o=
r the Guix
> command line.  I haven=E2=80=99t authorized the signing key, so Guix won=
=E2=80=99t
> accept any of the substitutes from example.com.
>
> Currently, Guix does not make it obvious to the user that a requested
> substitute server is ignored because its key is not authorized.  We
> should print a clear warning in this case.
>
> (guix scripts authenticate) already includes =E2=80=9Cvalidate-signature=
=E2=80=9D, which
> aborts with an error if the key is not authorized, but we don=E2=80=99t s=
eem to
> use it.

What if example.com serves substitutes that are signed by another
server, such as hydra.gnu.org?  No matter where a substitute comes from,
if it was signed with an authorized key and its signature checks out,
then it's OK to use, right?

=2D-=20
Chris

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=idpO
-----END PGP SIGNATURE-----
--=-=-=--

Message sent to bug-guix@HIDDEN:

Subject: bug#30143: UX: print warning if substitute server is not authorized
Resent-From: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 23 Jan 2018 07:01:01 +0000
Resent-Message-ID: <handler.30143.B30143.15166908296942 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Chris Marusich <cmmarusich@HIDDEN>
Cc: 30143 <at> debbugs.gnu.org
References: <idjpo681xyo.fsf@HIDDEN>
 <87a7x6xte0.fsf@HIDDEN>
User-agent: mu4e 1.0-alpha3; emacs 25.3.1
From: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
In-Reply-To: <87a7x6xte0.fsf@HIDDEN>
Date: Tue, 23 Jan 2018 07:50:02 +0100
Message-ID: <87shaxyspx.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>


Chris Marusich <cmmarusich@HIDDEN> writes:

> Ricardo Wurmus <ricardo.wurmus@HIDDEN> writes:
>
>> Suppose I add example.com as a substitute server by passing
>> “--substitute-urls=https://example.com” to the daemon or the Guix
>> command line.  I haven’t authorized the signing key, so Guix won’t
>> accept any of the substitutes from example.com.
>>
>> Currently, Guix does not make it obvious to the user that a requested
>> substitute server is ignored because its key is not authorized.  We
>> should print a clear warning in this case.
>>
>> (guix scripts authenticate) already includes “validate-signature”, which
>> aborts with an error if the key is not authorized, but we don’t seem to
>> use it.
>
> What if example.com serves substitutes that are signed by another
> server, such as hydra.gnu.org?  No matter where a substitute comes from,
> if it was signed with an authorized key and its signature checks out,
> then it's OK to use, right?

Correct.

-- 
Ricardo

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.